Black Box Side-Channel Leakage Verification Using Statistical Approach

Learn to verify cryptographic implementations for side-channel vulnerabilities through a statistical black-box testing approach in this 32-minute conference talk. Discover practical lessons from testing RSA implementations for Marvin Attack vulnerabilities and ECDSA implementations for Minerva vulnerabilities, and explore how these insights apply to ML-KEM testing. Examine the limitations of existing tools like Box Test, TVLA, and deduct, and understand how a new statistical methodology addresses these shortcomings. Master an algorithm- and architecture-agnostic approach that works with rejection sampling algorithms, enables remote network-based testing, and provides verification of side-channel leakage absence despite using statistical methods. Explore the open-source tool that has been successfully deployed in continuous integration systems for several years, offering a practical solution for black-box cryptographic security testing.